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5 TECHNICAL FIELD 

Applicante' invention relates generally to the field of programmable controllers 
and more particuiariy to a ayBtem for coupling a networlt of programmable controllers 
through an internetwork to a monitoring and control device. 

10 RELATED APPLICATIONS 

This application is a continuation-in-part of U.S. Patent Application No. 
09/303.458. which is a continuation-in-part of U.S. Patent Application No. 08/927.005. 
This application is also related to the following, commonly assigned application, entitled 
"Apparatus for Controlling Intemetwork Communications." U.S. Patent Application No. 
1 5 08/926,837. The contents of these Applications are expressly incorporated herein by 
reference. 

BACKGROUND OF THE INVENTION 

Remote monitoring and control of systems and processes have taken many 

20 forms. In the past, dedicated lines became the most common forms of communication 
between a control system and a remote tocation. This has limited application since the 
control system was not accessible from multiple locations. Modems have made it 
passible to access the control system from different locations, but these types of 
systems are generally restricted to downloading and uploading data files. Providing 

25 any type of control function between locations is rather limited in this type of 

environment. Further, an end user generalty required a customized interface to access 
the control system. 

With the grovrth of Internet, and its Wortd Wide Web providing a deliver platform 
for organizing Internet data through hypertext links, a client sen/er system can be 
30 designed that will give each end user the same type of a user friendly interface with the 
same universal access to services on the Web. The Web Is a network of documents 
called sites or pages stored on server computers throughout the world Each page will 
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usually contain text, sc 3 type of muttimedia offerings such as Qr hie imaqes, video 
or audio, and possible hypertext links to other documents. A browser allows a user to 
read the pages and interact with the choices associated with it. The browser is a 
graphical software program that sends connmands to the Internet Web site and displays 

5 whatever information is available on the page. Various browser programs are 
commercially available from different manufacturers. 

The Internet network employs methods designed to handle thousands of general 
purpose computers sharing a single cable, and therefore has no ability to differentiate 
traffic in terms of its purpose or the critlcality of its data. The Internet is no longer a 

10 network of computers sharing a single cable, but rather a web of interconnected point to 
point links involving both general purpose stations and specialized Infrastructure 
components such as routers and firewalls. 

The type of personal computer or work station used by the end user to connect 
to the Web Is of no regard. Communication over the Internet and other networks 

15 requires one of several types of protocols. Protocols such as Internet Protocol (IP) 
provide for file transfers, electronic mail, and other services. A Sun Microsystem 
programming language known as Java, along vwth Hypertext Markup Language (HTML) 
used In designing layouts and graphics for a Web site or page has extended Internet 
technology such that a web sKe can be used for dynamic applications, commonly called 

20 applets, that can be downloaded and run by the end user. These applets are 

interpreted and run within a Web browser and have been generally restricted to word 
processing and similar uses. Downloading and running applets can be slow in 
comparison to other types of compiled languages. Security rules imposed on a browser 
and enforced by the underlying JAVA language prevent applets from obtaining certain 

25 data from any other device other than the Web sen/er itself 

Programmable logic controllers (PLCs) are widely used In industry and process 
control. Many manufacturers pnjvide factory automation information using Microsoft 
Windows and other types of communication networking environments. These networks 
are usually slow, are not universally accessible and are limited to monitoring and data 

30 exchange. Control may be Implemented, but since the communication networks are 
non-deterministic, control is not real time. Specialized industrial networks using 
proprietary fieldbus alternatives can be very expensive. Conversion products are 

2 
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required to allow inforr »lon carried over those networks to be.V' le on a.general 
purpose network. Thdre ars significant installation and other deployment costs 
associated with the existence of such intennediate devices. Firewalls between the Web 
server and the application are designed to solve problems of security and are not 

3 designed for high perfbrmanoe. 

Programming the PLCs in these environments has many shortcomings. With 
many different PLCs possible in an integrated control system, making changes or 
updates may be difficult and expensive. The programming package is usually sold 
separate from the PLC. The user may need to purchase and maintain separate 

10 programming packages and may need training for each programming package. The 
package may have a different look and feel from others within the control system. 

It would be desirable to develop an automation control system whereby an user 
could use general, commercial networks such aa the internet in place of specialized 
industrial networks to remotely monitor and program automation control devices such 

15 as PLCs. 

SUiVliVlARY OF THE INVENTION 

Areordingly, the principal object of the present Invention is to provide an 
interface between an industrial oontrot system and a Web browser coupled to a 
20 network such as internet. 

Another object of the present invention is to provide remote access through a 
web browser to information and data contained in an industrial control system having a 
Programmable Logic Controller. 

A further object of the present invention is to provide remote programmability of a 
25 Programmable Logic contained in an industrial control system. 

In the preferred embodiment of the invention, the invention allows for easy 
access over a commercial network such as intemet to information within a 
programmable logic controller (PLC). Access can be made locally or worldwide using a 
commercial Web browser. The invention is comprised of a control system of essential 
30 elements Including, but not limited to a Web Interface, a local network, and a network 
interface to at least one PLC control system running an application program for 
controlling output devices in reaponse to status of input devices. The Web Internee 

3 
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runs Web pages from ; Ethernet board coupled directly to the P' back plane and 
includes en hypertext transfer protocol (HTTP) interpreter, a PLC bacK plane driver, a 
Transmission Control Protocol/Internet Protocol (TCP/IP) stack, and an Ethernet board 
kernel. The Web interface provides access to the PLC back plane by a user at a 

5 remote location through the Internet, The interface translates the Industry standard 
Ethernet. TCP/IP and HTTP protocols used on the Internet into data recognizable to the 
PLC, Using this Interface, the user can retrieve all pertinent data regarding the 
operation of the PLC, including PLC configuration, Input/Output (I/O) and register 
status, operating statistics, diagnostics, and distributed I/O configurations. Updates to 

10 operating soflware can also be downloaded through the Internet access. Residing in 
the PLC is a programming package accessible to a user through this interface whicli 
will allow the user to edit programs controlling the operation of the programmable logic 
controller system. 

Other features and advantages of the invention, which are believed to be novel 
15 and nonobvioua, will be apparent from the following specification taken in conjunction 
with the accompanying drawings In which there is shown a prefen'ed embodiment of the 
invention. Reference is made to the claims for interpreting the full scope of the 
invention which is not necessarily represented by such embodiment. 

20 BRIEF DESCroPTlON OF THE DRAWINGS 

Figure 1 shows an overview block diagram of a typical system illustrating the 
relationship between an user at a remote location and an Intemet Web site used for 
monitoring a process control system according to the present Invention. 
23 Figure 2 is a basic block diagram of the present invention illustrating an Internet 

interface to a programmable logic controller system. 

Figure 3 is a block diagram of the Web server module illustrated in Figure 2 
according to the present invention. 

Figure 4 is a typical mimic page available to a user at a remote location utilizing 
30 a browser which illustrates the present invention for monitoring a programmable 
controller system. 

4 
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DETAILED DESCRIPT H 

Although this invention Is susceptible to embodiments of many different forms, a 
preferred embodiment will be described and illustrated in detail herein. TTie present 
disclosure exemplifies th© principles of the lnvention and is not to be considered a limit 

5 to the broader aspects of the invention to the particular embodiment as described. 
Figure 1 showi« an ovan/lew block diagram of typical system illustrating the 
relationehip between an user 2 at a renrwte location and an Internet web site 4 used for 
monitoring a process control system 6. Hie user 2 will have a personal computer (PC) 
8 having a commerdaliy available browser 10. such as Netscape Communicatron's 

10 Navigator or Microsoft's Internet Explorer, installed for viewing the contents at the web 
site 4 by a monitor 12 through a networlt, such as the Internet 14. The PC provides a 
remote human-machine interface (HMI) to the process control system 6. Various 
interconnection services are readily available to provide the physical and electrical 
interconnection from the PC to the Internet 14 itself. The Internat 14 is e collectton of 

1 5 independent world wide communication networKs that are irrterconnected to each other 
and function as a single connectionless entity. Communication Is based on a 
client-server basis, using a number of established protocols that allow for 
communication and file transfers between the client and the server. The most widely 
used protocol is Internet Protocol (IP). 

20 The web site 4 Includes a network Interface 16 having an unique Internet 

address 18. a aen/er 20. and an application program 22. The server 20 acts as a 
hypertext transfer protocol (HTTP) interpreter which uses Transmission Control 
Protocol (TCP) in conjunction with internet Protocol, through a Transmission Control 
Protocol/Internet Protocol (TCP/IP) stack 24 to interact with the network interfece 16 

25 and the application program 22. This enables the data transfer between the application 
program 22 and the user 2 through the Internet 14. The application program provides 
data from the process control system 6. This data can be used to monitor the control 
process by the user 2 at the remote location. The TCP/IP stack 24 enables data 
transfers over the internet 14 between the user 2 and the web site 4 as required for the 

30 various layers specified by the IP protocol. 

The user 2 can connect to the Internet 14 using one of a number of internet 
. service providers and will enter the address of the web site 4 when connected. The 

5 
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web site 4 will display 'Orrie page which may contain text, some 'pe of multimedia 
offerings such as graphic images, video, or audio, and possifate hypertext links to other 
documents. The browser 10 will allow the user 2 to read the page and interact with the 
choices associated with it. The browser 10 will send commands to the web site 4 which 

5 will use the application program 22 to display, whatever information is available from the 
process control system 6. The browser 10 functions as a remote human-machine 
interface or HIVll control of the process control system as will be detailed below. 

Figure 2 shows a basic block diagram of the present invention illustrating the 
Internet interface to a programmable logic controller system. The web site 4 Includes 

10 the network interface 16 having an unique Internet address 18 and a web sen/er 30. 
The web server 30 provides the home page for the websrte. A firewall or security for 
the overall system can be included in the web server 30. but is generally maintained as 
part of the network interface 16. in addition to providing security for various pages at 
the site, the user can disable the web server 30. A password and user list is provided 

15 in initial configuration files stored in the web server 30 that are downloaded from a 

remote server. Protection of the configuration file Is then provided by the remote sen/er 
and the web sen/er 30 through the password and the user list The web server 3D 
provides a direct connection for a programmable logic controller (PLC) 32 to the 
Intemet 14 by plugging the web sen/er 30 into its back plane 34. The web sen/er 30 

20 provides both a client and aerver interface. All signals between the PLC 32 and the 
web server 30 are through the back plane 34 rather than over a aet of cables which 
would normally have to be coupled to input/output modules that are themselves 
plugged into the back plane 34. The back plane signals include addressing, control, 
data, and power. The client interface allows a user to send commands to a remote 

25 node over the Intemet and the server interface allows for processing commands that 
originated from a remote node. Controlling the PLC 32 from a remote HMI. essentially 
on a real time basis is possible by controlling the data flow through the web server 30. 

Associated with the PLC 32 are its application programs 36, dual port memory 
38 and Input/Output (I/O) modules 40. The application programs 38 include a ladder 

30 logic program for controlling the I/O modules 40. The web sen/er 30 functions as a 
node on a TCP/IP network 42 allowing It to send commands to the PLC 32 and receive 
the response. Although the TCP/IP network 42 in the preferred embodiment is an 

6 
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Ethernet network, othe igh level protocols could be used. Usinc wRb browser at a 
remote location through the Internet 14, a user can control and view configuration 
Information of the PLC 32. 

A programming package 33, using either Java or HTML resides In the PLC 32. It 
5 is based on Ethenr^t and Web technology and allows editing of the application 

programs 36 using the personal computer 8 by the user 2. The application programs 
36 stored as either a ladder logic or an lEC 1 131 language program, are viewed as 
PLC programs within the PLC 32, accessible using either the standard HTTP or custom 
PLC protocols that run over TCP/IP. The information needed to edit the PLC 32, 

10 including web pages 35 for the editing procedures, reside in the PLC 32 Itself. The 
programming package 33 converts these application programs 38 to and from fonmats 
needed for editing with a browser. The programming package 33 also includes symbol 
editors 37 and language editors 39. 

The user 2 will be able to view and edit the PLC application programa 36 from 

15 anywhere a browser is available, A firewall or security for the overall system* 

maintained as part of the network Interfece 16 that prevents unauthorized users from 
accessing the programming package 33. 

In addition to providing the ability to edit the application programs 36, by 
providing a File Transfer Protocol (FTP) based view of the application programs 38» file 

20 backup and restore can be handled through standard programming tools, allowing the 
user to manage the application programs 36 directly and efTiciently and to also use 
standard revision control software to manage the application programs 36, Further, 
since alt the symbols are stored within the PLC. any personal computer can be used to 
edit the application programs 36. 

25 The web server 30 is shown in greater detail in Figure 3. Various components 

provide the required connectivity to perform its functionaiity. A real time operating 
system 44 controls the Interaction between the components. The operating system 44 
allocates processor time on a central processor unit (CPU) 46 to various tasks, provides 
memory management, and provides a set of message services and signal services, 

30 The message and signal sen/ices allow for communication between tasks, and between 
drivers and a task. 



7 
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Connection to Vr TCP/IP network 42 is through an Ethern driver 48 which 
transmits and recehfes messages at a rate of 10 Mbs (megabits per second) or faster 
via an Ethernet communication chip 49, such as, in the case of 1 00 Mbs Ethernet, a 
Crystal CSB952 available from Cirrus Logic, Inc, It is contemplated that in the future 

5 Ethernet communication chips capable of speeds of 1 Gbs (gigabits per second) and 
faster can be used. The physical connection over which communication Is facilitated 
can be over a fiber optic cable or a twisted pair-type copper wire. In the case of 1 0 Mbs 
Ethernet over twisted pair-type copper wire, the copper wire and wire connections must 
conform to at least the Category S copper wire standard. 

10 Altematively, the TCP/IP stack 24 could be replaced by a dual TCP/IP stack. 

The dual TCP/IP stack comprises a first TCP/IP stack which provides eupport for a 
broad range of TCP/IP messages. The second TCP/IP stack is a "short stac^ which 
manages high priority control messages between the PLC 32 and I/O modules 40. For 
outgoing TCP/IP messages, the appropriate TCP/IP stack would ba chosen by an 

1 5 application program 36 associated with the PLC 32. On incoming TCP/IP messages, 
the TCP/IP message would be intercepted and examined to see if it Is a TCP/IP 
message that is intended for the Modbus on Ethernet protocol, if It is a TCP/iP 
message intended for the Modbus on Ethernet protocol, then the message is delivered 
to the second stack. If it is not a TCP/IP message Intended for the Modbus on 

20 Ethernet protocol, the first TCP/IP stack handles the message. In this manner, TCP/IP 
messages intended for the Modbus on Ethernet protocol are handled more quickly and 
efficiently than when a single TCP/IP stack is implemented. 

The web sen/er will have an unique global address 18, allowing it to be 
addressed by other devices on the nehvork. The Ethernet driver 48 manages transmit 

25 50 and receive 61 buffers in memory 52. and interfaces with the Ethernet 

communication chip 49. The transmit 50 and receive 51 buffers are shared both by the 
Ethernet communication chip 49 and the Ethernet driver 48. The Ethernet driver 48 
also pravidee a transmit request interface and a receive indication interface to a TCP/IP 
stack 54. The Ethernet communication chip 49 provides a transmit queue interface, a 

30 receive queue Interface* and generates intemjpts on completion of transmitting a 
message, and on receiving a new message. The Ethernet driver 46 places receive 
buffers in the rmeive queue. In the Interrupt routine, the Ethernet driver 46 examines 

8 
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the receive queue. If t ' messages are in the receive queue. Jt p ses the receive 
buffer to the TCP/IP steck 54. The TCPflP stack 54 copies the buffer, and sometime 
later calls the Ethernet driver 48 to return the buffer and place the returned buffer back 
Into the receive queue. 

5 The TCP/IP stack 54 calls the Ethernet driver 48 to transmit a message. The 

Ethernet driver 46 attempts to allocate a buffer from the shared memory 52. If it 
succeeds, it copies the message Into the buffer, and places the buffer into the Ethemet 
communication chip 49 transmit queue. If there is no transmit buffer, then the driver 
drops the transmit message. In the Inten^pt routine, the Ethemet driver 48 examines 

10 the transmit queue, and frees the transmitted buffers. 

The TCP/IP network 42 allows special MSTR (master) functions that allow nodes 
on the network to initiate message transactions. These MSTR functions include 
reading and writing data and are used for commands and responses. They allow 
programs running in the PLC 32 to Bend commands to a remote node on the TCP/IP 

15 network 42 and receive the responses. A back plane driver S8 sends commands and 
receives the response to the PLC 32 over the back plane 34, 

The back plane driver 66 receives request from the PLC's ladder logic MSTR 
blocks stored In Its memory 38. When a response Is available, the back plane driver 56 
passes It back to the MSTR block. The back plane driver 58 provides a client task 58. a 

20 FTP task 59, and server task 60 to the applications. The server task 60 interface allows 
an application to Issue a request command to the PLC's 32 executive program and 
receive Its response. The client task 58 allows an application to receive a new MSTR 
request and pass back the response to the ladder logic program. The FTP task SB 
provides a FTP based view of the application programs 36, allowing the user to 

25 manage the application programs 36 directly and efficiently and to also use standard 
revision control software to manage the application programs 38. 

The sen/ertask 60 uses a queuing mechanism and call back functions. An 
application queues both the request and the call back function associated with the 
request. When th© back plane driver 66 services the request in its Interrupt routine, it 

30 calls the associated call back function. The response and the original request is 

passed to the call back function. The call back function can call an operating routine to 
either pass a message or signet the application. 

9 
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The client task also uses queues and call back function The client 
application queues both an Indication request on queue and a call back function 
associated with the request. When the back plane driver 56 detects a new MSTR block 
request in its Interrupt routine, it calls the associated call back function. The request is 
5 passed into the call back function. The call back function can call an operating system 
routine to either pass a message or signal the application. If the back plane driver 56 
detects that the MSTR block has been aborted^ or is no longer being solved, it calls an 
user supplied associated abort call back function. The application calls a routine to 
pass the MSTR response and an associated call back routine to the driver. Sometime 

10 later, the driver passes back the response to the ladder logic program in its intenijpt 
service routine, and then calls the user supplied call back function. 

The PLC 32 interfaces with the web sen/er 30 hardware via the dual port 
memory 38. It reads and writes to the dual port memory 38 using an ASIC chip. 
Writing to a specified location will cause an interrupt. The PLC 32 first writes a 

J 5 message in the dual port memory 38. and then causes an interrupt. The message 
indicates a type of command. One type indicates that a MSTR block is being solved. 
Other types are used for passing requests to the PLC 32 and obtaining the responses 
to the requests. After the PLC 32 passes the message, it polls the dual port memory 38 
for commands placed by the back plane driver 56. These commands are read memory, 

20 write memory, and processing is complete. The back plane driver 58 uses state 
machines to process the MSTR interrupts. The maximum number of active MSTR 
blocks Is set at four in the present invention, requiring four state machines. When the 
back plane driver 56 receives a MSTR interrupt, ft attempts to find an associated state 
machine that matches with the MSTR block. If there are already four outstanding 

25 transactions, no more are available, and the back plane driver 56 will set the MSTR's 
outputs to false. If a state machine is found, the back plane driver 55 determines if it Is 
a new transaction, an outstanding transaction, or a response is available. If it is a new 
transaction it copies the request and calls the application's associated call back routine. 
If its an outstanding transaction, it indicates to the ladder logic program that the MSTR 

30 block is still busy. If a response is available, the back plane driver 56 copies the 

response, sets either the MSTR's completion or error output, and calls the application's 
call back routine, 

10 
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Two interrupts r s used for processing a request. On the ^ -t interruot, called 
the preport interrupt, the back plane driver 56 copies the request into a data structure 
located in the PLC's 32 dual men^ory 38. On the second intemjpt, called the end of 
scan intermpt, the badt plane driver 56 copies the response from the controller's data 

5 structure into the user's buffer. It then calls the user's associated call back function. 

The request for accessing the PLC's 32 registers is processed by the back plane 
driver 56 and is not sent to the PLC's executive program for processing. The back 
plane driver 56 determines the memory location in the memory 38 of the registers the 
PLC 32. At an end of scan interrupt, the back plane driver 56 processes the read/write 

10 register requests by sending commands via the dual port memory 38 to the PLC 32 to 
read or write the locations containing the registers. The back plane driver 56 will 
service a maximum of four read/write register requests at the end of a scan interrupt 

A client task 58 interfaces with the TCP/IP stack 54, the back plane driver 56 and 
uses the operating system 44 message services. It processes the MSTR request 

IS When the client task 58 receives a MSTR request from the back plane driver 56, it 
passes the request to the TCP/IP stack 54. When the TCP/IP stack 54 returns a 
response to the client task 58, it passes the response to the back plane driver 56. The 
TCP/IP stack 54 provides a Berkeley TCP/IP Interfeice and a signal extension. The 
signal extension calls a user supplied function which passes in a socket number, a task 

20 ID, and an event The signal function calls the operating system 44 to send a message 
to the task indicated by the task ID. It sends a message either to the client task 58 or 
server task 60, The client task 58 posts request indications to the back plane driver 56, 
and the associated call back routine calls the operating system 44 to send a message 
to the client task 58 for a new MSTR transaction. 

25 The client task 58 manages multiple outstanding MSTR transactions using the 

state machines. There is a linked list of connection state machines. The connection 
state machines are used for establishing connection and closing connections. In 
addition each connection state machine contains a list of transaction state machines. 
Each transaction machine on the connection state machine represents a transaction to 

30 a node represented by the connection machine. The transaction machines are used to 
send a request, and process the response- The client task 58 enters a toop after 
performing initialization. It calls the operating system 44 to receive a message. The 

11 
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operating system will b' -jk the client task 68 until there is a mess a until therf- i« a 
time out. It either receives a message from the TCP/IP stack 54. from a MSTR call 
back routine, or it times out. It process the message or the time out and then reenters 
the loop. If the message received from the operating system 44 is a new MSTR 

5 request, the client task will obtain a connection state machine, and places a new 
transaction machine at end of the list of the connection state machina^s list. At this 
point the transacUon machine will attempt to transmit the message. It may not be 
possible to transmit the message because no connection has been established, or the 
because the remote side may have applied flow control. 

10 If the message received from the operating system 44 is a TCP/IP events the 

client task 58 finds the associated connection machine and determines If the TCP/IP 
event is an accepted connection, an aborted connection, or a received data event. 
Based on the connection state, and the transaction machine's state, the client task 58 
processes the message to advance the transactions if there are any. Receiving data 

1 5 for the MSTR responses may occur over several TCP/IP events, and the transaction 
state machine assembles the data into a response. When the ollent task 68 requests 
the TCP/IP stack to transmit a message, not all of the message may be transmitted. 
This occurs when the remote node is flow controlled, which Is explained below. If the 
call to the operating system 44 to receive a message returns with a time out, or if there 

20 is a message, the client task 68 searches the list of connection machines that are 
flowed controlled. For each flow ccntrolled connection, it tries to advance the 
transaction state machines on the connection state machine list that are flow controlled. 

The server task 60 processes a request originating from the user at the remote 
location. The server task 60 interfaces with the back plane driver 56. the TCP/IP stack 

23 54, and the operating system's 44 message sen/ices. The sen/ertask 60 posts 
requests to the back plane driver 56, and an associated call back routine uses the 
operating system 44 message services to send the response to the server task 60, A 
TCP/IP stack 64 signal function also usee the operating system's 44 send aen/ice to 
send an TCP/IP event to the sen/er task 60. The server task 60 can handle muWpie 

30 transactions and connections. Like the client task 58, it maintains a list of connection 
machines, and each connection machine contains a list of transaction machines. The 
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csonnection machines : for managing the connection and theirr -actlon.machinea 
manage the incoming requests and responses. 

The server task 60 enters a loop after performing initiaiization. It calls the 
operating systenns 44 to receive a message. The operating systems 44 block the 

5 server task 60 until there is a message or until it times out. It either receives a message 
from the TCP/IP task's 54 signal handler, from the back plane driver 56 or it times out. 
It processes the message or the time and reenters the loop. If the message received 
from the operating systems 44 Is from the TCP/IP task's 54 signal handler, the server 
task 60 detennlnes if the event is a connection request, a close socket event, or a 

10 receive data event. Based on the TCP/IP event, the server task 60 uses the connection 
machine and transaction machine to advance the transaction. Received data form 
request may occur over several receive data events, and the transaction machine 
assembles the events into a request message. When the response r^essage is 
received from the operating system 44. the sen^'ertask 60 finds the connection and 

15 transaction machine In order to send the response. 

When the sen/er task 60 requests the TCP/IP stack 54 to transmit a message, 
not all of fte message may be tranamlttBd. Thia occurs when the remote node ts flow 
controlled. If the call to the operating system 44 is to recehro a message returns with a 
time out, or If there is a message, the server task 64 searches the list of connection 

20 machines that are flowed controlled. For each flow controlled connection, It Uies to 
advance the transaction state machines on the connection state machine list that are 
flow controlled. 

After the server task 60 has parsed the header of an incoming request, it 
attempts to allocate a structure to pass the request to the back plane driver 56. If the 
25 server task is already processing a predetemnined number of outstanding requests, the 
attempt fails, the connection is placed into a blocked state, and the body of the request 
is not read from the TCP/IP stack 54. As a result the TCP/IP stack may apply flow 
control to the remote node. When one of the other requests b complete, the free data 
Btmcture event causes a blocked connection machine to continue processing tha 
30 incoming Modbus request. 

The HTTP task 62 interf&ces with the TCP/IP stack 54, and the back plana driver 
56. The HTTP server task 62 receives a HTTP request from the TCP/IP stack 54. To 

13 
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process the request, it ay access the PLC 32 through the back • ' me driver 56 anri 
back plane 34. The HTTP server task 62 sends back the response over the rUh-ZIP 
stack 54. The framework is supplied by the operating system 44. The framework 
creates the HTTP task, accepts connection, and parses the HTTP request After 

5 parsing the request, It calls the operating system 44 to process the request. Processing 
the request Involves detemoining the request type and processing the actual request. 
The different request types allow a user to acquire a snapshot of the PLC 32 operations 
by allowing a view of various registers within the PLC 32 and dual memory 38. These 
request types also Include display of the PLC 32 configuration, remote and distributed 

10 I/O and module health statistics, display registers, back plane configuration, Ethernet 
statistics, editing the PLC program, and others, as shown in Table 1: 

Show the home page 

Show the programmable logic controller's configuration 

Show the Ethernet statistics 

Show the read register request page 

Show the 4x registers 

Show the racks attached to the controllers back plane 

Send an image. The different images are gif files that are 
displayed on the various pages 

Show the remote I/O statistics 

Show the list of configured remote I/O drops 

Show a remote i/O rack's configuration and health 

Show a remote I/O drop's communication statistics 

Show the I/O reference values of a remote I/O module 

Show a list of configured distributed I/O nodes 

Show the configuration and the health of a distributed I/O 

14 
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node 

Show the I/O reference values of a distributed 1/0 module 
Edit the PLC Program 



TABLE 1 

The home pege contains hyperlinks to many pages of data. The configuration 
5 page win display the configuration of PLC 32. The remote I/O and distributed I/O 
module health status pages are a series of linked pages, The first page displays the 
Mmmunication health statistics at the Remote I/O and Distributed I/O head and 
contains a link to a configured drop page. The configured drop page displays a table 
containing drop numbers which are linked to a drop status page and rack numbers 
10 which are linked to the drop and rack configuration pages. Two tables are included in 
the drop status page, one for showing the communication status of the drop and the 
other for showing whlcti racks are populated with the I/O modules. The drop and rack 
oonfiguration page displays the I/O modules, their health, and slot location for the given 
rack. From a selected module, a user can view it's input and output values. Register 
IS data is displayed in a template having a form and a table, with the user entering an 
address and a length. The table will display the register's values A table showing 
option modules and their slot location is displayed on the back plane configuration 
page. The data appearing on the pages Is static but can be automatically updated at 
preselected times. 

20 The operating system 44 processes these requests and responds by sanding 

HTTP messages through the TCP/IP stack 54. Processing some of these requests 
involves reading the PLC's traffic cop. registers, coils, or various page zero locations 
where statistics are kept. To perform these reads, the operating system 44 sends a 
request to the back plane driver 56 and uses an event signal mechanism and event 

25 flags to determine when the request is complete. After sending the request to the back 
plane driver 56, the operating system 44 waits for an event flag to be sent. When the 
back plane driver completes the request, the back plane driver 56 calls a call back 

15 
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routine, which sets the -enl. The operating system 44 then resu- procesainq the 
request 

A mimic page which represents some of the hardware physically conr^ected to a 
programmable logic controller system can.be constructed utilizing the graphical editing 

5 technique that is part of the present invention,. The present invention allows a user at a 
remote location, using a browser, to create, view, modify, and delete the mimic page 
and actually control various components illustrated in the mimic page. Figure 4 shows 
a simple motor start-stop control in ladder logic diagram form that could be available as 
a mimic page to the user. Pushing a motor start push button 160 will cause a motor 

10 start relay 1 S2 to energize through a normally closed stop push button 1 54 and a 

normally closed overload contact 156. Auxiliary motor start contact 158 will latch relay 
152 after the start push button 150 is released and pilot light 160 will illuminate. 
Auxiliary motor start contact 162 will provide povi«r to pump motor 164 which will 
remain running until atop push button 154 is depressed or overload relay 186 detects 

15 an overload condition. In this example, start push button 1 50, stop push button 1 54. 
overload contact 156, auxiliary motor start contacts 158 and 162, and overioad relay 
186 are inputs to the programmable logic controller system. Relay 152, pilot light 160, 
and pump motor 184 are outputs. The PLC will have the regiaters containing the 
animation data for the inputs and outputs. An application program In the PLC will 

20 respond to the inputs to control the outputs 

A user at a remote location wrill browse the Internet for the home page of the 
Installation of the programmable logic controller system. The PLC will have other 
control functions as well and if the user has the necessary authorizations, various 
options will become available. The home page will allow the user to acquire a snapshot 

25 of the PLC operations by allowing a view of various pages that will allow access to 
registers within the PLC. Other pageawill also include displays of the PLC's 
configuration, remote and distributed I/O modules health statistics, display registers, 
bBdk plane configuration, Ethernet statistics and others as shown previously shown In 
Table 1. 

30 The mimic diagram page will be called up on a browser screen which will allow 

the user to view the status of the system. The mimic diagram's light 1 80, relay 1 52. 
contacts 158, 162. and pump motor 164 will be updated to correspond to the state of 

i6 
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the actual devices. Th states of the inputs and outputs will then shown on the 
ladder diagram which will be automatically updated as they are changed. Through the 
use of applets representing the start 150 and stop 164 buttons, the user could manually 
control start and stopping of the motor by using a mouse or keyboard to position a 
5 cursor and "clicking" on either the start 168 or stop 170 boxes. 

While the specific embodiments have been illustrated and described, numerous 
modifications are possible without departing from the scope or spirit of the invention. 
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CLAIMS 

We claim: 

1 . A system for programming application programs controlling a programmable 
logic controller from a communication network, comprising: 

5 a. an interface module for coupllng.the programmable logic controller to the 

communication network; 

b. a program editor resident in the programmable logic controller, tha 
pn^gram editor for creating and editing the application programs; 

c. at least one Web page resident in the programmable logic controller, the 
10 Web page linked to the program editor; 

d. wherein the Web page is accessible to a user at a remote location using a 
web browser coupled to the communication network through the interface 
module; and 

2. The system of claim 1 further including wherein the application programs 
are viewed as files within the programmable logic controller, accessible to 
the communication networl< using a standard File Transfer Protocol. 

e. wherdn the Web page allows the user at the remote location to access 
13 the program editor to edit the application programs controlling the 

programmable logic controller. 

2. The system of claim 1 wherein the application programs are viewed as files 
within the programmable logic controller, accessible to the communication 

20 network using a standard File Transfer ProtocoL 

3. The system of claim 1 wherein the application programs are converted by the 
programming package and viewed on a web browser through either Java or 
HTML 

23 4. The system of claim 3 wherein the programming package further includes 

symbol editors and language editors and wherein all symbols are stored within 
the programmable logic controller, allowing any authorized personal computer 
coupled to the communication network to edit the application programs. 
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6. The system of c 'm 1 wherein the interface module includ- 

a real time operating system operating a central processing unit, 
a network interface for communicating with the communication network, 
a driver for communioatlng with that programmable logic controller, 
5 a protocol stack, 

a client task for communicating with the protocol stack for initiating received 
requests, 

a server task for communicating with the protocol stack for responding to 
received requests, and 
10 a protocol task for communicating with the protocol stack for receiving and 

responding to protocol task requests, 

6. TTie system of claim 5 wherein the communication network ts a world-wWe 
network known as the Internet using an Internet Protocol (IP). 

15 

7. The system of claim 6 wherein the Interface module functions as a web site on 
the Internet, the interface module including a global IP addrasa. 

8. The system of claim 7 wherein the protocol stack Is a Transmission Control 
20 Protocol stack and wherein the protocol task includes a server task using a 

hypertext transport protocol (HTTP) task to deliver hypertext documents to the 
network interface. 

8. The system of claim 8 wherein the HTTP task accepts a connection, parses an 
25 HTTP request, and calls the real time operating system to process the request. 

1 0, The system of claim 9 wherein the interface module further Includes a dual 

TCP/IP stack for data transfening comprising a first stack capable of handling a 
broad range of TCP/IP messages and a second stack capable of handling a less 
30 broad range of TCP/IP messages more quickly than the first stack. 
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11. A system for pre amming application programs contraUior programmable 
logic controller from a communication network, comprising: 
a. means for coupling the programmable logic controller to the 
communication network; 
5 b. means resident in the programmable logic controller for creating and 

edKing the application programs; 
c. at least one Web page resident in the programmable logic controller, the 
Web page linked to the creating and editing means resident In the 
programmable logic controller; 
10 d. wherein the Web page is accessible to a user at a remote location using a 

web browser coupled to the communication network through the coupling 
means; and 

2. The system of claim 1 farmer including wherein the application programs 
are viewed as files within the programmable logic controller, accessible to 
the communication network using a standard File Transfer Protocol, 
e. wherein the Web page allows the user at the remote location to access 
the creating and editing means to edit tiie application programs controlling 
IS the programmable logic controller. 



1 2, The system of claim 1 1 wherein the application programs are viewed as files 
within the progiBmrnable logic controller, accessible to tiie communication 
network using a standard File Transfer Protocol. 

20 

13. The system of claim 1 1 wherein the creating and editing means includes a 
programming package whereby the application programs are converted by the 
programming package and viewed as either Java or HTML. 

25 14, The system of claim 1 3 wherein Vne programming package further includes 

symbol editors and language editors and wherein all symbols are stored within 
the programmable logic controller, allowing any authorized personal computer 
coupled to the communication network to edit the application programs. 
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1 5. The system of c* n 1 1 wherein the coupling means incluxJ' aa interface 
module, the interface module including 

a real time operating system operating a central processing unit, 
a network Interface for communicating with the communication network, 
5 a driver for communicating with the programmable logic controller, 

a protocol stack, 

a client task for communicating with the protocol stack for initiating received 
requests. 

a sen/er task for communicating with the protocol stack for responding to 
10 received requests, and 

a protocol task for communicating with the protocol stack for receiving and 
responding to protocol task requests. 

16. The system of claim 1 5 wherein the communication network is a world-wide 
15 network known aa the Internet using an Internet Protocol (IP), 

17. The system of claim 16 wherein the interface module functions as a web site on 
the Internet, the Interface module including a global IP address. 

20 18. The system of daim 17 wherein the protocol stack is a Transmission Control 
Protocol stack and wherein the protocol task includes a sen/er task using a 
hypertext transport protocol (HTTP) task to deliver hypertext documents to the 
network Interface. 

25 19. The system of claim 1 8 wherein the HTTP task accepts a connection, parses an 
HTTP request, and calls the real time operating system to process the request 

20. The system of claim 19 wherein the interface module further Includes a dual 
TCP/IP stack for data transfening comprising a first stack capable of handling a 
30 broad range of TCP/IP messages and a second stack capable of handling a less 

broad range of TCP/IP messages more quickly than the first stack. 
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